Privacy Policy

THE CLUB ATHLETIC SOCIETY ("the Club") handles personal information collected through our website (theclubathleticsociety.com) and our member app (web and iOS; together, "the Service") as described below.

1. Information We Collect

• When you apply: name, email address, phone number (optional), Instagram handle (optional), and your application details (motivation, athletic background).
• When you use the member app: profile information (name, photo, job tags, goal race, personal bests), session bookings and attendance, badges and rank, payment records, and your posts and comments.
• Training records: sport, duration, distance, heart rate, calories and similar workout data. These are entered manually or imported only through your explicit action — via Strava connection, workout file import (FIT/TCX/GPX), or Apple Health (HealthKit) import.
• Technical data: cookies and local storage used to keep you signed in. We do not use advertising trackers.

2. Health Data (Apple HealthKit / Strava)

Data obtained from HealthKit or Strava is used solely to display and manage your own training log. We never use it for advertising or marketing, and we never sell or share it with data brokers or any other third party. Imports happen only when you initiate them, and you can revoke access at any time from iOS Settings or your Strava account.

3. Biometric Authentication (Face ID / Touch ID)

The app-lock feature uses your device's local authentication. Your biometric data itself is never transmitted to or stored on our servers.

4. How We Use Information

• Membership screening and administration (contact, membership fees, session operations)
• Providing the Service (training log, community features, notifications)
• Safety management (participation consent records, emergency contact)
• Improving the Service (aggregate, non-identifying statistics)

5. Third Parties and Processors

We do not share personal information with third parties without your consent, except as required by law. The Service relies on the following processors, each protected under their own privacy standards: Supabase (database and authentication), Vercel (hosting), Resend (email delivery), Apple (app distribution), and Strava (only if you connect your account).

6. Visibility of Your Records

Your training records are private by default. Other members can see them only if you explicitly share with them, and your profile fields are shown only where you have switched them on in your visibility settings.

7. Retention and Deletion

We keep personal information for the duration of your membership and any period required by law. Upon withdrawal, we delete your data within a reasonable period, except where retention is legally required (e.g., payment records).

8. Access, Correction and Deletion Requests

To request access to, correction of, or deletion of your personal information, contact us below. We will verify your identity and respond promptly in accordance with applicable law.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be announced within the Service.